CVE-2023-53786

dm flakey: fix a crash with invalid table line

State
Published
Severity
Not scored
Published
Dec 9, 2025
Updated
May 11, 2026
Reserved
Dec 8, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm flakey: fix a crash with invalid table line

This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512"

Fix the crash by checking if arg_name is non-NULL before comparing it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before f95cb1526669ccdf7eb12eefd57a893953e3595fAffected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before 12849ed107c0b2869fb775c81208050899006f07Affected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before 337b7af273562b73c46ef77a724604ad139ca762Affected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before a1e3fffe02e05c05357af91364ac0fc1ed425b5bAffected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before f76fcb9d43ec014ac4a1bb983768696d5b032df9Affected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before cb874a190f3f7c3c3fa5b979bee7a3b8cc3a19ccAffected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before 83b4e3d878ea6be9aec1d5a1ab177c766c64d1a0Affected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before 8258d84a7917aeece773716518deadb7ad776cb7Affected
  • a3998799fb4df0b0af8271a7d50c4269032397aa to before 98dba02d9a93eec11bffbb93c7c51624290702d2Affected
LinuxLinux
  • 3.1Affected
  • before 3.1Not affected
  • 4.14.315 through 4.14.*Not affected
  • 4.19.283 through 4.19.*Not affected
  • 5.4.243 through 5.4.*Not affected
  • 5.10.180 through 5.10.*Not affected
  • 5.15.111 through 5.15.*Not affected
  • 6.1.28 through 6.1.*Not affected
  • 6.2.15 through 6.2.*Not affected
  • 6.3.2 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.